D-Link DI-7400G+ Router Subroutine Command Execution

The vulnerability of the sub478D28 and sub4A12DC functions in D-Link DI-7400G+ software lies in the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows an attacker to execute arbitrary commands by sending specially crafted GET requests remotely...

CVE-2025-57105

The DI-7400G+ router has a command injection vulnerability, which allows attackers to execute arbitrary commands on the device. The sub478D28 function in in mngplatform.asp, and sub4A12DC function in wayosacserver.asp of the jhttpd program, with the parameter acmngsrvhost...